... they're not allowed by regulation. ...
... specify who was allowed to sign their bootloaders, operating systems, and so on. ...